Privacy Policy

1. “Personal information” means information about a living individual that can identify a specific individual through their name, mobile phone number, and the like.
2. The Company always posts this Policy on the first screen of the service, or on a screen linked from the first screen, so that users can easily check it at any time.
3. If the Company revises this Policy, it announces the effective date and the details of the revision on the service screen.

The Company collects only the minimum personal information necessary to provide the service.

2-1. Catering reservation inquiry (marketing website)

When a user completes and submits the reservation inquiry form, the following items are collected.

• The location coordinates and travel distance are values calculated and stored based on the event venue address entered by the user, in order to inform whether on-site service is available and the travel fee; the Company does not track the user’s real-time location.
• The “event (support) recipient name” may be the name of a third party who is not the applicant. The standard for processing this is separately explained in Article 11.

2-1-1. Referral analytics information (automatically collected upon catering inquiry submission)

To analyze through which channel catering inquiries are received, the Company automatically collects the following information at the moment the user submits an inquiry.

• The above information is collected at the time an inquiry is submitted and is used only for referral-path analysis and marketing effectiveness measurement (Article 3).

2-2. On-site ordering service (order website)

• The pickup-notification phone number is collected only when the user directly consents to the “Notify me by text when ready” option and enters a number (by default it is not collected).
• At Kakao login, the Company receives only the profile nickname and does not collect the phone number or email of the Kakao account.

2-3. Service operator and partner accounts

The Company collects and processes the following items for operator and partner accounts that operate and manage the service.

2-4. Methods of collection

• Direct entry by the user through the website’s inquiry form and order screens
• Receipt of inquiry content through the conversational intake of the ChatGPT app (OpenAI) channel (when the user chooses to use that channel)
• Provision via Kakao/Google social login (minimal items such as nickname)
• Access records (login history, etc.) that are automatically generated and collected during service use

The Company uses the collected personal information only for the following purposes, and obtains consent in advance if the purpose changes.

The Company processes and retains personal information within the retention period required by law or consented to by the user, and destroys it without delay once that period elapses.

• Inquiries where a contract was concluded are retained for the period set by the Electronic Commerce Act and other relevant laws, in order to preserve records of contracts, withdrawal of subscription, and the handling of consumer complaints and disputes.
• Information retained under law is not used for any other purpose.

1. The Company does not provide users’ personal information to third parties beyond the scope of the purposes stated in this Policy.
2. However, the following are exceptions.
   • When the user has separately consented in advance
   • When there is a special provision in the law, or when an investigative agency makes a request in accordance with the procedures and methods prescribed by law for investigation purposes

To provide the service smoothly, the Company entrusts personal information processing tasks as set out below, and when doing so, it stipulates necessary matters in the contracts so that personal information is managed safely in accordance with relevant laws.

• If the entrusted work or the trustee changes, it will be disclosed through this Policy.

For service-usage statistical analysis, the stable provision of web services, and the receipt of inquiries through a channel selected by the user (the ChatGPT app), the Company transfers personal information overseas (processing entrustment and storage, or conversational transit) as set out below. Users may refuse the cross-border transfer using the “How to refuse” methods below; even if refused, there is no restriction on the essential use of the service.

7-1. Google (Google Analytics GA4)

7-2. Microsoft (Microsoft Clarity)

• The Company applies masking on input screens so that entered items such as names and phone numbers are not recorded in session recordings.

7-3. Cloudflare (content delivery and security)

7-4. OpenAI (ChatGPT app channel)

• This cross-border transfer occurs only when the user chooses to use the ChatGPT app channel. The user’s ChatGPT conversation passes through OpenAI’s systems, and OpenAI’s privacy policy (openai.com/policies/privacy-policy) applies to that conversation. The Company receives and stores only the inquiry items submitted through this channel (name, contact, event information, etc.) via API.

1. Destruction procedure: The Company destroys personal information without delay once the retention period elapses or the processing purpose is achieved. Information that must be retained under other laws is stored separately and then destroyed once the retention period elapses.
2. Destruction method
   • Information in electronic file form: permanently deleted in a manner that makes recovery or reproduction impossible
   • Information in paper document form: shredded with a shredder or incinerated

1. Users (data subjects) may exercise the following rights regarding their own personal information at any time.
   • Request to access personal information
   • Request to correct errors, if any
   • Request to delete
   • Request to suspend processing
2. How to exercise: If you make a request to the Privacy Officer below by email or phone, the Company will take the necessary measures within 10 days of receipt and notify you of the results.
   • Email: [email protected]
   • Phone: 010-8271-0902
3. Users are obliged to keep their personal information accurate and up to date, and the user is responsible for problems arising from entering inaccurate information.
4. The rights of children under the age of 14 may be exercised by their legal representative.

The Company takes the following measures for the safe processing of personal information.

1. Administrative measures: The Company designates and manages the minimum number of personal information handlers, and establishes and operates internal standards for the protection of personal information.
2. Technical measures
   • Personal information is encrypted (TLS) during transmission for safe delivery.
   • Important information such as order customers’ mobile phone numbers and partners’ settlement accounts is encrypted before storage.
   • Access rights are granted and managed at a minimum to control unauthorized access.
3. Physical measures: Access to systems where personal information is stored and processed is controlled.

1. In a catering reservation inquiry, the “support recipient name” may be the name of a third party who is not the applicant.
2. The applicant must obtain the consent of the relevant party before entering the third party’s information, and the Company processes this information on the premise that the applicant has obtained such consent.
3. The Company uses this information only for the purposes of reservation inquiry consultation and event preparation.
4. If the party to the information (the data subject) so requests, the Company will, in accordance with the Personal Information Protection Act, inform them of the source of collection, the purpose of processing, and the fact that they have the right to request suspension of processing.

1. The Company uses cookies for service-usage statistical analysis. A cookie is a small piece of information that a website stores in the user’s browser, used to analyze how the service is used (Google Analytics GA4, Microsoft Clarity).
2. In addition, to analyze the referral path of catering inquiries, the Company collects and stores visit-path information (the automatically collected items in Article 2, 2-1-1) on its own servers (first-party) at the time a user submits an inquiry. This is first-party collection for the purpose of referral-path analysis and marketing effectiveness measurement, not third-party advertising tracking, and the relevant identifiers are destroyed 90 days after collection (Article 4).
3. Users may refuse the storage of cookies through their browser settings. However, if cookie storage is refused, there may be inconvenience in using some services.
   • e.g., You can change whether cookies are allowed in the browser’s “Settings > Privacy and security > Cookies” menu.

1. The Company’s service is intended for users aged 14 or older, and the Company does not collect the personal information of children under the age of 14.
2. If it is confirmed that the personal information of a child under the age of 14 has been collected, the Company destroys the information without delay.

The Company designates a Privacy Officer as set out below to oversee the tasks related to personal information processing and to handle users’ inquiries, complaints, and damage relief related to personal information processing.

• Privacy Officer: Suyoung Kim (Representative)
• Contact: 010-8271-0902
• Email: [email protected]

Users may direct all personal-information-related inquiries, complaints, and damage relief arising from using the service to the Privacy Officer, and the Company will respond to and handle them without delay.

If you need consultation or reporting regarding an infringement of personal information, you may contact the following organizations.

1. This Privacy Policy applies from its effective date.
2. If the Company revises this Policy due to changes in laws or services, it announces the changes on the service screen (notices, etc.) before the effective date.
3. In the case of changes that are unfavorable to users, the Company gives notice at least 30 days in advance.